PT-2014-1033

CVE-2014-1724

·

Published

2014-04-08

·

Updated

2024-06-15

Description by

CVSS 2.0
7.5
High
MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 34.0.1847.116 Free(b)soft Laboratory Speech Dispatcher version 0.7.1
Description The issue is related to a use-after-free error in the Free(b)soft Laboratory Speech Dispatcher module. This error can be exploited by remote attackers, potentially causing a denial of service, such as an application hang, or possibly having other unspecified impacts on the system. The exploitation occurs via a text-to-speech request.
Recommendations For Google Chrome versions prior to 34.0.1847.116, update to version 34.0.1847.116 or later to resolve the issue. For Free(b)soft Laboratory Speech Dispatcher version 0.7.1, consider disabling the text-to-speech functionality until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2014-1582
DSA-2905-1
MGASA-2014-0183
OPENSUSE-SU-2024:10171-1
OPENSUSE-SU-2024:12948-1
Found an issue in the description? Have something to add? Feel free to write us 👾